AzAdvertizer data changes detected #2528
Description
Azure Advertizer Data Diff Report
Resource Type: microsoft.aad/domainservices
New Advisor Recommendations:
- Upgrade to latest Price Sheet API
- Transition to Azure RBAC roles
Resource Type: microsoft.app/containerapps
New Advisor Recommendations:
- Transition to Azure managed services or open-source quick starts
Resource Type: microsoft.cognitiveservices/accounts
New Advisor Recommendations:
- Migrate from Custom Commands to new Speech Services
Resource Type: microsoft.containerinstance/containergroups
New Advisor Recommendations:
- Azure Container Instances should not be publicly exposed
- Managed identities assigned to Azure Container Instances should follow least privilege
Resource Type: microsoft.dbforpostgresql/flexibleservers
New Advisor Recommendations:
- password_encryption should be set to scram-sha-256 for Azure Database for PostgreSQL servers
- connection_throttle should be set to "on" for PostgreSQL Servers
- 'Allow access to Azure services' should be disabled for PostgreSQL Servers
- Public IP access should be disabled for Azure Database for PostgreSQL Servers
Resource Type: microsoft.iotsecurity/defendersettings
New Advisor Recommendations:
- Access compliance content via Service Trust Portal
Resource Type: microsoft.machinelearningservices/workspaces
New Advisor Recommendations:
- Transition from Batch Endpoints preview APIs
Resource Type: microsoft.network/azurefirewalls
New APRL Recommendations:
- Monitor "AZFW Latency Probe" metric
Resource Type: microsoft.search/searchservices
New Advisor Recommendations:
- Migrate to Grounding with Bing Search
Resource Type: microsoft.security/awsresource
New Advisor Recommendations:
- Avoid the use of the "root" account
- IAM policies that allow full ":" administrative privileges should not be created